Workplace Engineering Specialist (OKTA)

About

We are looking for a Workplace Engineering Specialist (OKTA) to lead the digital ecosystem enabling our employees to work effectively anywhere in the world. In this role, you will be the technical expert on Okta, responsible for identity strategy, user lifecycle automation and access security.

The Digital Department Workplace pilots the digital ecosystem enabling our employees to work effectively anywhere in the world.

As a member of the Workplace Engineering Team and reporting to the Workplace Engineering Lead, the Workplace Engineering Specialist (OKTA) will design, implement, and manage secure identity and access solutions for new subsidiaries and environments, while managing existing sites to ensure they comply with IT standards and utilize up-to-date infrastructure.

This role involves a deep understanding of Tech issues and requirements, as well as identity and access management (IAM) challenges and stakes. It requires the ability to quickly understand stakeholders and adapt to a multi-cultural environment while updating project sponsors. One of the main responsibilities is to anticipate technical constraints, define IAM frameworks (especially around OKTA), and oversee methodologies to ensure successful, on-time, and on-budget delivery, ensuring consistency and alignment with industry standards across all sites.

Key Responsibilities

• Lead Okta Architecture & Identity Management: Drive the design and implementation of our Okta federation strategy (SAML, OIDC), including advanced authentication policies (MFA, Adaptive MFA) and robust SCIM provisioning/deprovisioning. Leverage Okta Workflows, Inline Hooks, and Event Hooks to build scalable, automated identity lifecycle processes.

• Pioneer Cloud-Native Identity: Be a key contributor to the decommissioning of our on-premises Active Directory, accelerating the transition to a secure, modern, cloud-only architecture.

• Strengthen Security and Governance: Define and enforce identity governance policies (OPA), securely manage non-human and service accounts, and actively collaborate with Security/Platform teams to implement our Zero Trust model and conditional access policies.

• Ensure Compliance and Excellence: Produce high-quality technical documentation for audits and compliance, while also managing critical infrastructure components like 802.1X radius.

• Enable Business and Growth: Act as the subject matter expert (Level 3 support) for all authentication and access issues, support business teams in seamless application integration via Okta SSO, and mentor team members to elevate the team's overall expertise in identity and access management.

• Contribute to Collaboration Ecosystem: Participate in the administration and optimization of the Google Workspace environment, complementing the core identity function.

Benefits

• Tailor-made training and coaching program
• Remote working policy
• A wellness program "Pauses" with many activities and animations in-house
• Access to Eutelmed, a digital mental health and well-being platform that allows you to speak with an experienced psychologist
• A healthy and eco-responsible company restaurant
• Individual or family health insurance
• CSE benefits
• A rooftop
• A gym with free classes

Additional Information

• Ambassador program: an employee volunteering initiative dedicated to all Believers interested in having a positive impact on Diversity, Equity & Inclusion (DEI), wellbeing and the planet.
• Implementation of the sustainable mobility package “Forfait mobilité durable” => Reimbursement of up to 600€ for public transport/low carbon footprint
• 5 calendar days 2nd parent leave with 100% pay (in addition to the legal paternity or adoption leave)

We are committed to having a workforce that is representative of the community it serves at all levels of the organisation. We, therefore, welcome applications from all backgrounds and all sections of the community regardless of age, disability, gender, race, religion and sexual orientation.